CCNA Security Question of the Week: Access Control List

Which are the key differences between Cisco IOS Access Control List (ACL) configurations and Cisco ASA ACL configurations? (Choose two.)

A. The Cisco ASA appliance interface ACL configurations use netmasks instead of wildcard masks.
B. The Cisco ASA appliance interface ACL also applies to traffic directed to the IP addresses of the Cisco ASA appliance interfaces.
C. The Cisco ASA appliance does not support standard ACL. The Cisco ASA appliance only support extended ACL.
D. The Cisco IOS interface ACL has an implicit permit-all rule at the end of each interface ACL.
E. Cisco IOS supports interface ACL and also global ACL. Global ACL is applied to all interfaces.

Reveal Answer

Answer: A and C.

Cisco IOS devices use a wildcard mask, which operates as an inverted subnet mask (zero means that the equivalent bit must match; one means that the equivalent bit does not matter). ASA uses netmasks in which ones are a match and zeros are ignored. The IOS-based device has standard (i.e., match only on source IPv4 addresses) and extended (i.e., match on source and destination and can match on protocol type and port numbers as well) ACLs. The ASA ACL area is always extended.

CCNA Security Question of the week Series

CCNA Security Question of the Week: Application Layer Firewall
CCNA Security Question of the Week: Enable Secret
CCNA Security Question of the Week: Cisco Configuration Professional
CCNA Security Question of the Week: Secure Network Management
CCNA Security Question of the Week: Enterprise Installation
CCNA Security Question of the Week: Access Control List

Please support our Sponsors here :